Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xpdf | Xpdf | 3.0.1_pl1 (including) | 3.0.1_pl1 (including) |
| Red Hat Enterprise Linux 3 | RedHat | xpdf-1:2.02-11.el3 | * |
| Red Hat Enterprise Linux 4 | RedHat | cups-1:1.1.22-0.rc1.9.20.2.el4_5.2 | * |
| Red Hat Enterprise Linux 4 | RedHat | kdegraphics-7:3.3.1-6.el4_5 | * |
| Red Hat Enterprise Linux 4 | RedHat | gpdf-0:2.8.2-7.7.1 | * |
| Red Hat Enterprise Linux 4 | RedHat | tetex-0:2.0.2-22.0.1.EL4.10 | * |
| Red Hat Enterprise Linux 4 | RedHat | xpdf-1:3.00-14.el4 | * |
| Red Hat Enterprise Linux 5 | RedHat | cups-1:1.2.4-11.14.el5_1.3 | * |
| Red Hat Enterprise Linux 5 | RedHat | poppler-0:0.5.4-4.3.el5_1 | * |
| Red Hat Enterprise Linux 5 | RedHat | tetex-0:3.0-33.2.el5_1.2 | * |
| Gpdf | Ubuntu | dapper | * |
| Gpdf | Ubuntu | edgy | * |
| Koffice | Ubuntu | dapper | * |
| Koffice | Ubuntu | devel | * |
| Koffice | Ubuntu | edgy | * |
| Koffice | Ubuntu | feisty | * |
| Koffice | Ubuntu | gutsy | * |
| Koffice | Ubuntu | hardy | * |
| Koffice | Ubuntu | intrepid | * |
| Koffice | Ubuntu | jaunty | * |
| Koffice | Ubuntu | karmic | * |
| Koffice | Ubuntu | upstream | * |
| Libextractor | Ubuntu | dapper | * |
| Libextractor | Ubuntu | devel | * |
| Libextractor | Ubuntu | edgy | * |
| Libextractor | Ubuntu | feisty | * |
| Libextractor | Ubuntu | gutsy | * |
| Libextractor | Ubuntu | hardy | * |
| Libextractor | Ubuntu | intrepid | * |
| Libextractor | Ubuntu | jaunty | * |
| Libextractor | Ubuntu | karmic | * |
| Pdfkit.framework | Ubuntu | dapper | * |
| Pdfkit.framework | Ubuntu | edgy | * |
| Pdfkit.framework | Ubuntu | feisty | * |
| Pdftohtml | Ubuntu | dapper | * |
| Pdftohtml | Ubuntu | edgy | * |
| Pdftohtml | Ubuntu | feisty | * |
| Poppler | Ubuntu | dapper | * |
| Poppler | Ubuntu | devel | * |
| Poppler | Ubuntu | edgy | * |
| Poppler | Ubuntu | feisty | * |
| Poppler | Ubuntu | gutsy | * |
| Poppler | Ubuntu | hardy | * |
| Poppler | Ubuntu | intrepid | * |
| Poppler | Ubuntu | jaunty | * |
| Poppler | Ubuntu | karmic | * |
| Poppler | Ubuntu | upstream | * |
| Xpdf | Ubuntu | dapper | * |
| Xpdf | Ubuntu | edgy | * |
| Xpdf | Ubuntu | feisty | * |
| Xpdf | Ubuntu | gutsy | * |
| Xpdf | Ubuntu | upstream | * |